Privacy Policy

Slumber & Stars Party Teepees (Slumber & Stars) is committed to safeguarding theprivacy of our website visitors and customers.

Slumber & Stars (“we, “us”, ‘our”) is a “Controller” under the EU retained law version of the General Data Protection Regulation ((EU) 2016/679) (“GDPR“) in respect of certainPersonal Data you give to us.

This Privacy Notice is intended to help you understand what Personal Data Slumber &Stars collects about you, why we collect it, and what we do with it.

The data we collect

The type of data we collect and from you directly (data supplied to us by you that weprocess) includes:

Personal and contact data – Information which enables us to address and contact you, such as your name, email address, telephone number and postal address.

Transactional data – information related to transactions for goods/ services you havemade with us. This may include names and date of birth of party attendees where relevant.

Communication data – information related to or resulting from communications between you and us. This includes content from the communication and metadata associated with the communication, generated from website contact and booking forms.

Usage data – information obtained from your use of our website. This can include your IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views and website navigation paths, as well as information about the timing, frequency and pattern of your service use. The source of the usage data is our analytics tracking system.

Why we collect your data

The purposes for which we collect and process your data include:

Operations – the purpose of fulfilling the service you have requested from us, processing your order, providing our service, supplying our goods, generating payment requests, invoices and receipts. We do this in order to perform the contract you enter into with us.

Publications – the purpose of publishing this data on our website and social media platforms. We do this as per your instruction and consent.

Communications – the purpose of communicating with you (excluding direct marketing)by email, SMS, post, fax or telephone, to support the service and handle complaints. We do this to maintain customer relations and for the administration of our website, service and business.

Direct marketing – the purpose of creating, targeting and sending direct communications by email, SMS, post and telephone for marketing purposes. We do this after obtaining your consent.

Research and analysis – the purpose to researching and analysing the use of our website, services and other interactions with our business. We do this to monitor, support, improve and secure our website, services and business.

Record keeping – the purpose of creating and maintaining our databases and business records. We do this to ensure we have access to information which allows us to run our business properly, efficiently and in accordance with this policy.

Security – the purpose of security, prevention of fraud and other criminal activity. We do this to protect our website, services, business, and for the protection of others.

Insurance and risk management – the purpose of obtaining and maintaining insurance coverage, manage risk and/or obtaining professional advice. We do this to properly protect our business against risks.

Legal claims – the purpose of establishing, exercising or defending any legal claims. We do this to protect and assert our legal rights, your legal rights and the legal rights ofothers.

Legal compliance and vital interests – the purpose of complying with a legal obligation to which we are subject, or to protect your vital interests or that of another person.

How we may use your data

We may disclose your data to others for the following purposes:

Insurance – to our insurers and/ or professional advisors for the necessary purpose of obtaining or maintaining insurance coverage, managing risks and professional advice.

Web hosting – personal data held in our website database is stored on the servers of our hosting service provider.

Payments and refunds – financial transaction data may be handled by payment service providers, who may access data necessary for the purpose of processing payments, refunds and dealing with complaints and queries relating to these.

Legal services – where a disclosure may be necessary for compliance with a legal obligation to which we are subject, or to protect vital interests, or to establish, exercise or defend any legal claims.

How we protect your data

In complying with our legal obligation around retaining and deleting your personal data, any data that we process (for any purpose) will be treated as follows:

Contact data – retained for a minimum of 12 months following the most recent contact made between you and us, and for a maximum period of 12 months following that date.

Account data – retained for a minimum of 2 years following the date of closure of the relevant account, and for a maximum period of 12 months following that date.

Transaction data - retained for a minimum of 2 years following the date of the transaction, and for a maximum period of 12 months following that date.

Communication data - retained for a minimum of 2 years following the date of the communication in question, and for a maximum period of 12 months following that date.

Legal compliance and vital interests – retained as necessary for compliance with a legal obligation to which we are subject, or to protect your vital interests or that of another person.

Your rights

Your principle rights under data protection law are:

The right to access – you can ask for copies of your personal data;

The right to rectification – you can ask us to rectify inaccurate personal data and to complete incomplete personal data;

The right to erasure – you can ask us to erase your personal data;

The right to restrict processing – you can ask us to restrict the processing of your personal data;

The right to object to processing – you can object to the processing of your personal data;

The right to data portability – you can ask that we transfer your personal data to another organisation or to you;

The right to complain to a supervisory authority – you can complain about our processing of your personal data; and

The right to withdraw consent – to the extent that the legal basis of our processing of your personal data is consent, you can withdraw that consent.

These rights are subject to certain limitations and exceptions.

You can learn more about the rights of data subjects by visiting https://ico.org.uk/for-organisations/guide-to-dataprotection/guide-to-the-general-data-protection-regulation-gdpr/individual-rights/.You may exercise any of your rights in relation to your personal data by written notice to us, using the contact details set out below.

Cookies

As you use our website, technical details in connection with visits are logged by ourinternet service provider for statistical purposes. No information is collected that could be used by us to identify website visitors. The technical details logged are confined to the following items:

• The IP address of the users webserver

• The top level domain name used (for example .ie, .com, .net, .biz)• The previous website address from which the user reached us, including anysearch criteria used.

• Click screen data which shows the traffic of users around this website (forexample pages accessed and documents downloaded).

• The type of web browser used by the website user.

Slumber & Stars will not attempt to identify individual visitors, or to associate any technical details listed above with any individual. You can set your browser not to accept cookies and the above websites tell you how to remove cookies from your browser. However, blocking cookies will mean that some of our website features may not function as a result.

For further information visit or www.allaboutcookies.org.

Amendments

We may occasionally update this policy by publishing a new version on our website.Please check our website to ensure you are happy with any changes to this policy.

Contact

Our website is owned and operated by Slumber & Stars Party Teepees. You can contactus via our website enquiry form or by email hello@slumberandstars.co.uk